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I. FEDERALLY SPONSORED RESEARCH 
NOT APPLICABLE. 

II. COMPUTER PROGRAM 

Attached with this patent application is a CD-ROM. A file named NADO.jar con- 
tains the JAVA byte code that implements an embodiment of NADO cryptography. 

III. BACKGROUND - FIELD OF INVENTION 

The present invention relates broadly to cryptographic methods and devices, and 
in particular to stream cipher and block cipher methods used in these methods and 
devices. This invention is also applicable in other fields, such as pseudo-random num- 
ber generators, used by algorithms that require random numbers. Cryptographic 
devices and methods are generally used to encrypt and decrypt information transmit- 
ted through communication and transmission systems. However, they also may be 
used to encrypt passive data stored on a computer or another physical device such as 
a tape drive. Typically, the message is encrypted by a sending agent using a unique 
key, and the encrypted message, called ciphertext, is transmitted to a receiving agent. 
Using the same unique key, the receiving agent applies a decryption device or method 
to the ciphertext. The output of this decryption device or method is the same message 
that the sending agent gathered before encrypting and sending it. 

IV. BACKGROUND - PRIOR ART 

In the references, section X, [SCHNEIER] provides a description of many of the 
cryptographic systems mentioned here. 

U.S. Patents 4,218,582 and 4,405,829 are examples of public-key encryption systems. 
U.S. Patent 4,218,582 has been shown to be insecure. U.S. Patent No. 4,405,829 
(RSA) is based on number theory. RSA relies on the fact that no one currently 
knows of a computationally effective way to factor the product of two extremely large 
unknown prime numbers. While RSA is believed to be secure, it is too slow for 
computationally demanding encryption applications unless specialized hardware is 
built to execute its algorithms. Even in hardware, RSA is a few orders of magnitude 
slower than DES, which is a private-key system. Consequently, RSA is most useful for 
distributing private keys, utilized by private-key encryption systems, and for imple- 
menting protocols. As aptly stated in [SCHNEIER], public- key cryptography is best 
for key management and a myriad of protocols. Symmetric private-key cryptography 
is best for encrypting data. 

DES is a commercial block cipher private-key cryptographic system. DES is com- 
monly used by commercial banks, financial institutions and other unclassified gov- 
ernment agencies. "DES has been traditionally used by banks and other financial 
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institutions for protecting the transmission of the funds and other transactions re- 
quiring high security.", [NYTIMES]. In 1998, Paul Kocher demonstrated a hardware 
device that cracked a DES encrypted message in 56 hours. The cost of building the 
hardware device was less than 250,000 U.S. dollars. 

Overall, up to this point in time, the use of non-autonomous dynamical systems 
applied to cryptography has not been proposed. (See subsections VI.D, VI.E, VI. G, 
and VI. I) While permutations have been utilized in cryptography for at least 75 
years, [SCHNEIER, pp. 11-13], usually one or two permutations are used and these 
permutations stay fixed for a given key. (See U.S. patents: 4,255,811; 4,316,055; 
5,001,753; 5,297,207; 5,511,123). Using a sequence of permutations with different 
lengths to reorder a sequence of information or states has not been proposed. (See 
subsection VI. C.) The use of permutations to generate a non-autonomous dynamical 
system is new; and the use of inverse permutations to transpose elements of the 
permutation is also new. (See subsection VI.I.) Similarly, up to this point in time, 
creating a non-autonomous dynamical system, using n by n matrix multiplication on 
n by 1 matrices has not been proposed as an encryption process. (See subsections 
VLE and VI. G.) Lastly, the creation of a Perturbator to break up periodic behavior 
in any kind of dynamical system, in particular any encryption process, is new. (See 
subsections VI. F and VI. H.) 

V. SUMMARY AND ADVANTAGES OF INVENTION 

Non-autonomous dynamical orbit (NADO) cryptography is a process for encrypt- 
ing and decrypting information. The underlying process is a fast stream-like cipher 
that may be implemented efficiently in analog or digital hardware or software. The 
NADO process makes use of four novel concepts in cryptography: (1) A sequence 
of permutations which scrambles and spreads out the encrypted information; (2) A 
state generator built with a non-autonomous dynamical system to generate an un- 
predictable sequence of states; (3) One or more perturbators which over time change 
both the non-autonomous dynamical system and the sequence of permutations in a 
non-periodic way. (4) The use of the key to build the non-autonomous system and 
sequence of permutations. 

NADO uses a symmetric private key to generate the mathematical systems in (1), 
(2), and (3). Furthermore, NADO composes these mathematical systems in a unique 
way, creating an astronomical number of possibilities to check in a brute- force attack. 
The composition of these systems makes NADO unbreakable to a brute-force attack 
with current computer technology. 

One of the important advantages over previous methods is the difficulty of breaking 
this encryption method. The number of calculations required to crack the cipher is 
astronomical. At the same time, the executable code that implements NADO requires 
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a small amount of computer memory. A second advantage is that without using 
any type of specialized hardware nor any type of data compression, the encryption 
processes of NADO execute much faster, as a function of the difficulty of cracking 
NADO. Its security and speed enable applications such as real-time encryption of 
wireless transmissions, demanding real-time military software, real-time embedded 
systems, commercial real-time networking, and real-time internet applications. A 
third advantage is that NADO requires smaller key sizes and enables variable-sized 
keys. A fourth advantage is that statistical tests on NADO-encrypted data show that 
plain-text attacks are as difficult as brute-force attacks. 

Lastly, it can be mathematically shown that a broad class of current encryption 
algorithms generate a sequence of states that exhibit eventual periodicity. (See sub- 
section VI. I.) It is possible that someone could propose a method of using this eventual 
periodicity to decode a message encrypted by these kinds of encryption algorithms - 
even for extremely large periods. NADO presents a new notion called a Perturbator 
to break up this eventual periodicity. 

Further objects and advantages of NADO will become apparent from the attached 
software and ensuing description. 

VI. DETAILED DESCRIPTION OF THE INVENTION 

In this section, subsection A presents the general cryptographic process. Subsec- 
tions B, C, D, and F explain definitions and concepts needed to discuss particular 
embodiments of the cryptographic process. Subsections E, F, G, H, I, J present em- 
bodiments of the NADO cryptographic process. Subsection J shows how to build 
instantiations of NADO from the key. Subsection K summarizes key distribution. 
Subsections L and M describe the JAVA byte code that executes two embodiments 
of NADO. 

A. CRYPTOGRAPHIC PROCESS 

In this patent, information that has not been encrypted is called a message: Please 
wire £50,000 to account 349-921118. Information that has been encrypted is called cipher- 
text: + —3y=0zl4.* 5A,0QxR4cje;iu-j":9b?2P-)lX[0t. 

There are two ways to implement the cryptographic process. 
Method A Encryption: 

The expression [^1,^2,^3,^4,^5,- ■-] represents a message. 

i. Use a key to build a state generator, and a sequence of permutations. 
(Subsection J.) 

ii. Apply the sequence of permutations to the message so that the order is 



permuted: [dj,,^,^,^,^ <,...). (Subsections B and C.) 

iii. Use the state generator to create a sequence of states: [si, s 2 , s 3 , s 4 , ss, . . . , s n , . . . ]. 
(Subsections D, E, F, G, H, and I.) 

iv. Use state s x to encrypt message element d h . Use state s 2 to encrypt 
message element d i2 . Use state s 3 to encrypt message element d i3 , and 
continue on, all the way up to use state s n to encrypt message element di n . 
And so on. 

Method A Decryption: 

The expression [01,02,03,04,05,... ,c„,...] represents ciphertext (encrypted message). 

i. Use a key to build a state generator, and a sequence of inverse permutations. 
(Subsection J.) 

ii. Apply the sequence of inverse permutations to the ciphertext so that the order 
is permuted: [c^ , a 2 , c i3 , c u , a 5 , . . . , a n , . . . ] . (Subsections B and C.) 

iii. Use the state generator to create a sequence of states: [s u s 2 , s 3> s 4j s 5 , . . . s n , . . . ]. 
(Subsections D, E, F, G, H, and I.) 

iv. Use state si to decrypt ciphertext element a t . Use state s 2 to decrypt 
ciphertext element Ci 2 . Use state s 3 to decrypt ciphertext element Cj 3 , and 
continue on, all the way up to use state s n to decrypt ciphertext element c» n . 
And so on. 

Method B Encryption: 

The expression [d u rf 2 , d 3 , d 4 , d 5j . . . , d ni . . . ] represents a message. 

i. Use a key to build a state generator, and a sequence of permutations. 
(Subsection J.) 

ii. Use the state generator to create a sequence of states: [s u s 2 , s 3j s 4 , s 5 , . . . , « n , . . . ]. 
(Subsections D, E, F, G, H, and I.) 

iii. Apply the sequence of permutations to the sequence of states so that the order 
is permuted: [s h , s i2 , s <3 , s i4 , s is , . . . , s in , . . . ]. (Subsections B and C.) 

iv. Use state to encrypt message element d x . Use state s i2 to encrypt 
message element d 2 . Use state s i3 to encrypt message element d 3 , and 
continue on, all the way up to use state s in to encrypt message element d n . 
And so on. 

Method B Decryption: 

The expression [ci J c 2 ,c 3} c4 J c 5 ,...,c n5 ...] represents ciphertext (encrypted message). 
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i. Use a key to build a state generator, and a sequence of inverse permutations. 
(Subsection J). 

ii. Use the state generator to create a sequence of states: 
[*i.*2i*3 ) a4,*5i'--i«ni..-]- (Subsections D, E, F, G, H, and I). 

iii. Apply the sequence of inverse permutations to the sequence of states so that 
the order is permuted: [si^aia,**,,*^,^,. ..,«<„,...]• (Subsections B and C). 

iv. Use state $ h to decrypt ciphertext element a. Use state s i2 to decrypt 
ciphertext element c 2 . Use state s i3 to decrypt ciphertext element c 3 , and 
continue on, all the way up to use state s in to decrypt ciphertext element c n . 
And so on. 

COMMENTS ON METHOD A 

In method A, step iii may precede ii or step ii may precede iii, or they can be 
executed simultaneously. 

COMMENTS ON STEP iv. 

In step iv of methods A and B, there are many ways to implement both the function 
that encrypts the message element with the corresponding state element, and the 
inverse function that decrypts the ciphertext element with the corresponding state 
element. 

Let / denote the function used to encrypt message element d with state element s. 
Then the encrypted (ciphertext) element is c = f{d y s). When decrypting ciphertext 
element c with state 5, then the inverse of / is used, denoted as In this case, the 
decrypted element is / _1 ( c > 5 )- Observe that / -1 (/(d,s),s) = d must hold so that the 
receiver can decrypt the encrypted message. / -1 (/(d,s),s) = d is just a mathematical 
way of representing a simple idea: The sender encrypts a message; after the receiver 
decrypts this encrypted message, the receiver is able to read and understand the 
message. 

The function / should have the following two properties: 

(1) The function must be invertible i.e. f' l (f(d,s),s) = d. 

(2) The function and its inverse function must execute fast on a computer. 

There are three preferred implementations of /. First, the binary operator Exclusive- 
OR, denoted by ©, is the most preferable on digital computers because it and its 
inverse are extremely fast. (The Exclusive-OR function is its own inverse.) e is 
a binary operator obeying the following rules: 1 © 0 = 1. 0 © 1 = 1. 0©0 = 0. 
1 © 1 = 0. If the state s and d are represented by more than one bit, then the bitwise 
Exclusive-OR function is defined by applying © to corresponding bits. As an example, 
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suppose the message element d = [10110000], and the state s = [00101110]. In this case, 
©(d,s) = (l©0, 0 0 0, 101, 10 0, 0 01, 0 01, 0 01, 0 0 0] = [10011110]. 

Second, suppose L is the number of distinct values that message element d or state s 
can be assigned. One can define = (d+s) modulo L, and the inverse / _1 (c,s) = (c-s) 
modulo L. Vice versa also works: f(d,s) — (d-s) modulo L, and f~ l (c,s) = (c+s) modulo L. 

When K is a non-negative integer, K modulo n means divide K by n and the answer 
is the remainder. 29 modulo 8 equals 5 because 5 is the remainder when you divide 29 
by 8. When K is a negative integer, the definition changes. Add the smallest positive 
multiple of n that makes the sum of K and this multiple greater than or equal to 0. 
More precisely, K modulo n equals K + c*n, where c is the smallest positive integer such 
that (K + c*n) > 0. As an example, -263 modulo 256 equals -263 + (2*256) = 249. Another 
example, -26 modulo 8 equals -26 + (4 * 8) = 6. 

Third, defining / as a particular permutation is fast and its inverse is fast too. The 
next subsection covers permutations. 

B. THE FIRST MATHEMATICAL SYSTEM 

Step ii of method A applies a sequence of permutations when encrypting a message, 
and step iii of method B applies a sequence of inverse permutations when decrypting 
ciphertext. In method A, while encrypting the message, the purpose is to scramble 
the order of the message. In method B, while encrypting the message, the purpose is 
to scramble the order of a sequence of states. 

In method A, when decrypting the ciphertext, the purpose is to unscramble the 
order of a sequence of ciphertext elements. In method B, when decrypting the cipher- 
text, the purpose is to unscramble the order of a sequence of states. 

Let the symbol S denote a set. S can be a finite or infinite set. A permutation 
is a function a : S — ► S that sends elements of S to elements of 5, is l to l, and is 
onto. 1 to 1 means that no two distinct elements from S get mapped by o to the same 
element. More formally, if s u s 2 are any two distinct element from 5, in other words 
si ^ s 2 , then a(si) 7^ <r(s2)- Onto means that if you choose any element r from 5, you 
can find an element s so that a maps s to r. In other words, for any element r from 
5, there is some element s in 5 satifying a(s) =r. In the context of cryptography, the 
properties l to l , and onto are useful because they help assure that a sequence of a 
message or states that have been scrambled by a permutation(s) can be unscrambled 
by the inverse permutation(s). 

The identity permutation is the permutation that sends every element to itself. 
Formally, i : S — > S. For every element s in 5, i(s) = 5. As an example, choose 5 to 
be the numbers 0 thru 4, inclusive. The identity i sends every element to itself means 
thati(0) = 0, i(l) = 1, i(2) = 2, i(3) = 3, and i(4) = 4. 

A finite permutation is a permutation on a finite set. Any finite permutation can 



7 



be represented as a finite sequence of numbers. The word 'sequence' means that the 
order of the numbers matters. The sequence [0,1] is not the same sequence as [1,0). 
Square brackets [ ] represent a sequence. 

The sequence, [0,1,2,3,4], represents the identity permutation on S. This sequence 
is interpreted as a permutation in the following way. The number 0 is at the beginning 
of the sequence, so i(0) = 0. The next number in the sequence is 1, so i(l) = 1. The 
number 2 follows 1 in the sequence, so i(2) = 2. The number 3 follows 2 in the sequence, 
so i(3) = 3. Finally, 4 follows 3 in the sequence, so i(4) = 4. 

As a different example, choose S to be the numbers 0 thru 7, inclusive. Choose 
A = [1,5,3,6,7,2,4,0]. The number l is at the beginning of the sequence, so A(0) = 1. 
The next number in the sequence is 5, so A(l) = 5. The number 3 follows 5, so A(2) = 3. 
Similarly, A(3) = 6, A(4) = 7, A(5) = 2, A(6) = 4, and A(7) = 0. 

There is a simple way to check that A is 1 to 1 and onto. Check that all 8 numbers 
are in the sequence, and make sure none of these numbers occurs in the sequence 
more than once. 

If a is a permutation, then the inverse of o is denoted a" 1 . When you apply a and 
then apply a" 1 , or vice versa, this composite function is the identity map. Formally, 
a o a~ l = a' 1 o a = i. In other words, the function a o <y~ l sends every element to itself, 
and the function a' 1 o a maps every element to itself. 

The inverse of A, denoted A~ x , is represented by the sequence, [7,0,5,2,6,1,3,4]. The 
following analysis verifies that this sequence defines the inverse of lambda. From the 
sequence, A-^O) = 7, A-^l) = 0, A" 1 ^) = 5, A" 1 ^) = 2, A" x (4) = 6, A" 1 ^) = 1, 
A" 1 (6) = 3, and A" 1 (7) = 4. Next, check that A o A-^O) = A(7) = 0, A o A _1 (l) = A(0) = 1, 
A o A- J (2) = A(5) = 2, A o A-*(3) = A(2) = 3, A o A" 1 ^) = A(6) =4, A o A" x (5) = A(l) = 5, 
A o A-H6) = A(3) = 6, A o A" 1 (7) = A(4) = 7. 

This paragraph defines two different operations on a permutation. A transposition 
is an operation that swaps two elements in a permutation. Let a = [1,0,2,6,7,5,3,4] 
be the initial permutation. Transpose 2 and 5 in g. After the transposition, a = 
[1,0,5,6,7,2,3,4]. A rotation is an operation that rotates the elements in a permuta- 
tion. Let a = [1,0,2,6,7,5,3,4] be the initial permutation. After a rotation, the new 
permutation is a = [4, 1 , 0, 2, 6, 7, 5, 3] . 

Any permutation can be constructed efficiently using transpositions. The following 
example illustrates how to build A starting with the identity permutation and using 
only transpositions. The identity permutation on 8 elements is represented by the 
sequence: [0,1,2,3,4,5,6,7] 

TRANSPOSE 1 and 0: [1,0,2,3,4,5,6,7]. 

TRANSPOSE 5 and 0: [1,5,2,3,4,0,6,7]. 

TRANSPOSE 3 and 2: [1,5,3,2,4,0,6,7]. 
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TRANSPOSE 6 and 2: [1,5,3,6,4,0,2,7]. 

TRANSPOSE 7 and 4: [1, 5, 3, 6, 7, 0, 2, 4]. 

TRANSPOSE 2 and 0: [1,5,3,6,7,2,0,4]. 

TRANSPOSE 4 and 0: [1,5,3,6,7,2,4,0]. 

It took only 7 transpositions to change the identity permutation to the permutation 
A. Starting with the identity permutation, it takes at most 8 transpositions to generate 
any of the possible permutations. There are a total of 8! possible permutations, where 
8! is a shorthand method of representing the first 8 numbers multiplied times each 
other: 1*2*3*4*5*6*7*8 = 40320. 

In cryptography applications, we recommend permutations of size greater than 46 
because 47! is greater than 10 59 . 10 59 is an overwhelming number of possibilities to 
check with current computers and will be in the foreseeable future. For a permutation 
of size 256, the number of possible permutations is greater than 10 506 . In the future, 
as the speed of computers improves, one should increase the size of the permutations 
used to make brute-force attacks impractical. 

If S has n elements, it takes at most n transpositions to construct any permutation 
on S. The general procedure for constructing any of the n! permutations is similar to 
the steps already mentioned. Start with the identity permutation, and then execute 
n transpositions. 

Initialize a equal to the identity permutation, [0, 1, 2, 3, . . . , n - 2, n - 1]. 

Execute the steps inside the brackets at least n times. 

{ 

Randomly choose two distinct natural numbers i ^ fc, satisfying 0 < i, k < n. 
Transpose the ith element and the fcth element in a. 

} 

This procedure is shown for a permutation of length 32. Initialize a equal to the 
identity permutation: 

[0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31]. 

Choose 21 and 4 randomly. Transpose the 2lst and 4th elements. 

[0, 1, 2, 3, 21, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 4, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31] 

Choose 27 and 14 randomly. Transpose the 27th and 14th elements. 

[0, 1, 2, 3, 21, 5, 6, 7, 8, 9, 10, 11, 12, 13, 27, 15, 16, 17, 18, 19, 20, 4, 22, 23, 24, 25, 26, 14, 28, 29, 30, 31] 

Choose 29 and 4 randomly. Transpose the 29th and 4th elements. 

[0, i, 2, 3, 29, 5, 6, 7, 8, 9, 10, 11, 12, 13, 27, 15, 16, 17, 18, 19, 20, 4, 22, 23, 24, 25, 26, 14, 28, 21, 30, 31] 

Choose 11 and 17 randomly. Transpose the 11th and 17th elements. 

[0, 1, 2, 3, 29, 5, 6, 7, 8, 9, 10, 17, 12, 13, 27, 15, 16, 11, 18, 19, 20, 4, 22, 23, 24, 25, 26, 14, 28, 21, 30, 31] 
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Continue these steps for another 28 transpositions to build a random permutation 
on 32 elements. This method of constructing an arbitrary permutation is important 
because it prevents an intruder from trying to guess the permutation. A potential 
intruder can not eliminate permutations that may be unreachable by some other 
algorithm that constructs a permutation. In our case, the intruder must check on 
average f possibilities. Further, transpositions can be executed very quickly on a 
digital computer. A permutation a of size 256 requires only 256 memory swaps, and 
about 2 * 256 = 512 bytes of memory to store a and the inverse of a. On the other 
hand, a brute force attack requires checking more than 10 506 permutations because 
2^1 > io 506 . This transposition method is able to generate an astronomical number of 
possibilities to check, using very little computation (256 memory swaps), and a small 
amount of memory. 

C. PERMUTING INFORMATION AND STATES 

This section explains the method of using permutations to change the order of a 
sequence of information or a sequence of states. 

Let D = [d Q ,d ll d 2 ,d 3} d 4i d* n d 6 ,d 7 ,d 8) dc h d l o ) d ll) d l 2} be a sequence of a message with 13 
elements. Each message element, d i5 represents m bits, where Ui > 1. Define the 
permutation A of length 4 to be [2,0,3,1]. This means that A(0) = 2, A(l) = 0, A(2) = 3, 
and A(3) = 1. Define the permutation a of length 6 to be a = [4,2,0,5,3, 1]. This means 
that <j(0) = 4, a(l) = 2, (j(2) = 0, a(3) = 5, a(4) = 3, and == 1. Define 7 = [2,0, 1]. Then 
7 (0) -2, 7 (1) = 0, and 7(2) = 1. 

Apply A to permute the first 4 elements of D, apply a to permute the next 6 elements 
of D, and apply 7 to permute the last 3 elements of D. The new permuted message 
sequence is: 

Ma(0) 5 ^A(l)^A(2), d A ( 3 ), <k'(0)+4, ^(1)4.4, ^(t(2)+4, ^a(3)+4 5 4r(4)+4, 4r(5)+4* d 7 ( 0 )+10, d 7 (i)+i 0 , d 7 (2)+lo]> 

which equals [^2,^0,^3,^1,^8,^6,^4, (k,d 7 ,ds, ^12,^10,^11]. 

This paragraph provides further details on how to apply a to the subsequence, 
[d 4 ,d5,d 6 ,d7,d 8 ,d 9 ], of the message sequence D. Applying a creates a new permuted 
subsequence [ds,d 6i d 4 ,d 9j d 7 ,d 5 }. The 0th element of the permuted subsequence is d 8 
because a(0) + 4 = 8. The first element of the permuted subsequence is d 6 because 
(7(1) + 4 = 6. The second element of the permuted subsequence is d 4 because a(2) +4 = 4. 
The third element of the permuted subsequence is d 9 because <r(3) +4 = 9. The fourth 
element of the permuted subsequence is d 7 because <j(4) +4 = 7. The fifth element of 
the permuted subsequence is d 5 because a(5) + 4 = 5. Notice that 4 is added each time 
because 4 is the sum of the lengths of the previous permutations applied to D. In this 
particular case, A is the only previous permutation applied to D and A's length is 4 so 
the sum is 4. 

This paragraph provides further details on how to apply 7 to the subsequence, 
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[dio,dii,di2], of the message sequence D. Applying 7 creates a new permuted sub- 
sequence [di2>dio,dii]- The 0th element of the permuted subsequence is d i2 because 
7(0)+10 = 12. The first element of the permuted subsequence is d 10 because 7(l)+l0 = 10. 
The second element of the permuted subsequence is d n because 7(2) + 10 = 11. No- 
tice that 10 is added each time because 10 is the sum of the lengths of the previous 
permutations, A and a, applied to D. 

In a similar way, use A, a, and 7 to permute the sequence of states: 
S = [so, si,s 2 , s 3 , 54, 55, 5 6 , s 7) 58,s9,sio,5u, $12]. After applying A, a, and 7, the permuted 
sequence is [s 2 ,s 0} 53, 5 X ,s 8 ,s 6 , 54,59,57,55,512,510,511]. 

In general, let D be a sequence of a message [do,di,<2 2 ,d 3 ,d 4 , ..<*n-i] with n message 
elements. Choose any sequence of permutations [a u <r 2 , • • . 0*], where ai is a permutation 
of length mi, cr 2 is a permutation of length m 2 , and so forth up to, a k is a permutation 

of length /c, and all the lengths sum to n. In other words, m 1 +m 2 + m 3 -i + m k = n. 

Permute the message sequence D with this sequence of permutations so that the new 
permuted message sequence is K l (o),rfa 1 (i),^ l(2 ),...,d ffl ( mi _i),da 3 (o)+m 1 ,... ) 

4 2 {m 2 -l)+mi , d<T 3 (0)+mi+m2, 4 3 (l)+mi+m 2 ) ■ ■ • , 4 3 (m 3 - l)+mi +m 2 > 4 4 (0)+mi +m 2 +m 3 i • ■ ■ , 
do k (m k - 1) -fn - m k 1 * 

Similarly, let 5 be a sequence of states [s 0 , s u s 2 , s 3 , 5 4 , . . . s n _ x ] with n elements. Choose 
any sequence of permutations [a u a 2 , . . .a k \, where a x is a permutation of length m u 
<r 2 is a permutation of length m 2 , and so forth, a k is a permutation of length fc, and 

all the lengths sum to- n. In other words, mi + m 2 + m 3 + h m k = n. Permute this 

sequence of states S so that the new permuted sequence is 

[s<n(0),5 ai (l), 5*i (2), ■ • • >S<ti(tth-1), «ff 2 (0)+mi , • • • , ^(ma-lj+m! , s a 3 (0)+m l +m 2 i 5 <J 3 (1)+ "»i +m 2 , • - • , 
s <r 3 (Tn 3 -l)+mi+m2 5 S ff4(0)+mi+m 2 +m 3 ) • ■ • , s <r k (m k -l)+n-m fc ] • 

D. THE SECOND MATHEMATICAL SYSTEM 

The second system is a state generator. This system iterates a dynamical sys- 
tem to create this sequence of states. An iterative autonomous dynamical system is 
created by a function / : X — > X, where X is a set, [ROBINSON]. When a func- 
tion / and an initial orbit point x are chosen, the iteration of / on x creates a 
sequence of states: [x, /(*), / o f(x)J ofo f(x), . . . ]. This sequence of states is called 
the orbit of x with the function /. It is also possible to create a sequence of states 
using a sequence of functions [/i,/ 2 ,/ 3) /4, • . rather than a single function. The 
iteration of this collection on an initial orbit point x creates a sequence of states: 
[^,/i(^),/2o/i(x),/ 3 o/ 2 o/ 1 (a:) J /4o/3o/ 2 o/ 1 (x),...]. As the system is iterated, if the func- 
tion applied sometimes changes, then this is an iterative non-autonomous dynamical 
system, [FISKE]. An iterative autonomous dynamical system is a special case of a 
non-autonomous dynamical system. If all the f { represent the same function, then 
this is the definition of an autonomous dynamical system. 
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A smooth dynamical system is created by a vector field on a manifold, [SPIVAK]. If 
the vector field does not change over time, then it is a smooth autonomous dynamical 
system. If the vector field changes smoothly over time, then it is a smooth non- 
autonomous dynamical system. In a smooth dynamical system, one creates a sequence 
of unpredictable states by sampling the coordinates of the trajectory at successive time 
intervals: t 0 < t\ < t 2 < . . . 



E. ITERATIVE SYSTEMS WITH MATRICES OVER F 2 

This subsection explains how to construct a discrete non-autonomous dynamical 
system, using matrices over the finite field F 2 . F 2 is the finite field with two elements: 
0 and 1. There are two operations for the finite field F 2 , addition and multiplication 
represented by + and *, respectively. The complete rules for addition are: 0 + 0 = 0. 
0 + 1 = 1. 1 + 0 = 1. 1 + 1 = 0. The complete rules for multiplication are: 0*0 = 0. 
0*1 = 0. 1*0 = 0. 1*1 = 1. 

Matrices whose entries lie in F 2 can be created. The dot product is defined with 
matrices that have only one row or one column. Choose the matrix V = ( l 0 1 ). V 
has 1 row and 3 columns, and is called a 1 by 3 matrix. 



Choose the matrix 3 by 1, W = 



1 

w 



The dot product between V and W is a 



number in F 2 . The computation of the dot product consists of steps i. thru iv. 

i. Multiply the number 1 in the first column of V by the number 0 in the first row of 
w. 

ii. Multiply the 0 in the second column of V by the 1 in the second row of W. 

iii. Multiply the 1 in the third column of V by the 1 in the third row of W. 

iv. Add the results of i., ii., and iii. 

The dot product computation just described is (1 * 0) + (0 * 1) + (1 * 1) = 1. 
In the more general case, V is a 1 by n matrix and W is a n by 1 matrix. 



Choose V = ( v\ V2 t>3 



v n ), and W = 



The dot product between V and 



W iS (Vi * Wi) + (V 2 * W 2 ) + (^3 * W 3 ) + ' * • + {V n * W n ). 

Next, matrix multiplication is defined in terms of the dot product. Choose a 3 by 3 



/1 0 r 



matrix, A = 



0 0 1 J . Choose a 3 by 1 matrix, B = 1 
\0 1 0/ \0/ 



Matrix multiplication 
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A * B is computed by calculating a distinct dot product between each row of matrix 
A, and the 3 by 1 matrix B. 





/I 


0 








A*B = 


0 


0 




(!)■ 


0 




U 


1 









The first row of 



/1\ 
0 

W 



is 1 because this matrix entry is computed by calculating 



the dot product between the first row of A and the matrix B. The first row of A is 
(1 0 1 ). This dot product computation is (1 * 1) + (0 * 1) + (1 * 0) = 1. The second row 

n 

of 0 is 0 because this matrix entry is computed by calculating the dot product 

between the second row of A and the matrix B. The second row of A is (0 0 1). 

This dot product computation is (0 * 1) + (0 * 1) + (1 * 0) = 0. The third row of 0 is 

W 

1 because this matrix entry is computed by calculating the dot product between the 
third row of A and the matrix B. The third row of A is (0 1 0). This dot product 
computation is (0 * 1) + (1 * 1) + (0 * 0) = l. 





f Gil 


ai2 


a i3 








0*22 


a 2 3 


a 2 „ 


n matrix A = 


«31 


»32 










a„2 


0>n3 • 





by an n by 1 matrix B = 



fbn\ 
&21 

&31 



. The result is an n by 1 matrix A * B = C = 



C21 
C31 



The number in the first row of C equals the dot product between the first row of A 
and the matrix B. In other words, c n = (a n * b n ) + (a i2 * b 2 \) + (ai 3 * 6 3i ) H- • • • + (a ln * 6 n i) 
Similarly, the number in the second row of C equals the dot product between the 
second row of A and the matrix B. In other words, c 2 i = (a 2i * 6 U ) + (a 22 * 6 21 ) + (a 2 3 * 
hi) + • • • + (a2n * b nX ) The ith row of C equals the dot product between the tth row of A 
and the matrix B. In other words, cn = (an * b n ) + (a i2 * b 2 i) + (a i3 * 6 3 i) + • ■ • + (a in * b n i) 

Choose A to be a n by n matrix over F 2 . Let X n be the set of all n by 1 matrices 
over F 2 . The matrix A creates a function A : X n — > X n using matrix multiplication. 
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Choose s to be a n by 1 matrix lying in X n . s is called the initial orbit point. Define 
A(s) = A * s. As described in subsection D, if A remains changed as the dynamical 
system is iterated, then A creates a discrete autonomous dynamical system. The orbit 
of s with respect to A is [s, A * s, A * A * s, A * A * A * s, . . . ]. The n by 1 matrices in the 
orbit, s, A * s, A * A * s, and so on, are called orbit points. A is called the iterating 
matrix. 

As the dynamical system is iterated, if the matrix A changes occasionally, then 
this creates a discrete non-autonomous dynamical system. There are some important 
goals when changing the iterating matrix. 

• Use a small amount of memory. 

• Use a small amount of computational time. 

• Make sure that the matrix does not become all zeroes. 

• If one of the orbit points becomes all zeroes, then there is a way for one of the 
entries in the future orbit to become non-zero after one or more iterates. 

• If the points in the orbit are n by 1 matrices, assure that the orbit of the 
non-autonomous system reaches every one of the possible 2 n matrices (states). 

There are many ways to accomplish these objectives: 

i. Swap rows or columns of the matrix. 

ii. Swap the orbit point with a row or column in the iterating matrix. 

iii. Change entries in the matrix or orbit point from one to zero or zero to one. 

iv. Transpose individual entries in the matrix over time. 

v. Transpose entries from the orbit point with entries in the iterating matrix. 

vi. Rotate the entries in one row of the matrix. 

vii. This method is an enhancement of ii. Replace a row of the matrix A with the 
sum of the zero repeller and the current orbit point. Replace the current orbit 
point with the same row of the matrix A. Increase the zero repeller by 1. Below 
is a section of this code executed in NADO.jar on the CD-ROM. 

temp = (orbitpoint + zerorepeller) ; 
orbitpoint = matrix[rowtoswap][0] ; 
matrix[rowtoswap\[Q] = temp ; 
zerorepeller + + ; 

There are also a number of ways to decide when to change the matrix. The matrix 
can be changed after each iteration, or it can be remain unchanged for a number 
of iterations and then can be changed. If the matrix remains unchanged for a few 
iterations, this helps reduce computational time. 
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The next example illustrates changing the matrix in a non-periodic way. Initialize 
A and s 0 . The subscript denotes the iterate number. 



A = 



/o 


0 


1 


1 


1 


0 


1 


o\ 






1 


0 


1 


1 


1 


1 


0 


1 




0 


0 


1 


1 


1 


1 


0 


1 


1 




1 


1 


0 


0 


0 


1 


0 


1 


1 




1 


















s 0 = 




0 


1 


1 


0 


0 


0 


1 


0 


0 


0 


0 


0 


0 


1 


1 


1 


0 




1 


1 


1 


1 


0 


1 


0 


1 


0 




1 


\1 


1 


1 


1 


1 


1 


1 


o) 




w 



After the first and second iterate, 



the states are si = A * so = 



l 
l 
1 

0 
0 
0 

W 



and 



s 2 = A * si = 



1 
1 
1 
0 
0 

1 

\o/ 



Swap s 2 with the first row of A. After the swap, the new values of A and s 2 are 



A = 



1 

0 
1 
0 
0 

1 

Vi 



0 0 

1 1 



0 

1 



1 

0 

0 1 



0 0 0 1 1 1 



1 
1 

1 

0 
0 
0 

0/ 



52 = 



0 

1 
1 
1 

0 

1 

w 



After the 3rd iterate, s 3 = A*s 2 = 



1 

0 
0 
0 
0 

1 

Voy 



Swap the 3rd and 7th rows of A. After the swap, A = 



/o 


1 


1 


1 


0 


0 


1 


o\ 


1 


0 


1 


1 


1 


1 


0 


1 


1 


1 


1 


0 


1 


0 


1 


0 


1 


0 


0 


0 


1 


0 


1 


1 


0 


1 


1 


0 


0 


0 


1 


0 


0 


0 


0 


0 


1 


1 


1 


0 


0 


1 


1 


1 


1 


0 


1 


1 


\1 


1 


1 


1 


1 


1 


1 


0/ 
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After the 4th, 5th, 6th and 7th iterates with no changes made to A, 



s 4 = 



1 
1 

0 
0 
1 
0 

W 



s 5 = 



1 
0 
1 
0 

1 
1 



s 6 = 



t 1 ) 




(1\ 


1 




1 


0 




0 


0 




1 


0 


s 7 = 




1 


0 




0 


0 




1 


w 




w 



where s 4 = A * s 3 , s 5 = A * s 4 , s 6 = A * s 5 , and s 7 = A * s 6 . 

1 
0 
1 
0 
0 

1 

\o/ 



After flipping the 5th row of s 7 from 1 to 0, s 7 = 



After the 8th iterate, s 8 = 



0 
1 
0 
0 

1 
1 

\o/ 



Continue to generate states s 9 ,si 0j ... indefinitely, changing A or in a non-periodic 
way. 



F. PERTURBATOR 

A Perturbator is a new notion. A general Perturbator is any process that changes 
some dynamical system in a non-periodic way. The Perturbator described in this 
section is designed to change A or S, in a non-periodic way; execute fast; and use a 
small amount of memory. 

Use part of the private key to initialize the integer variables: n,0,5,M and c. We 
prefer to initialize n = 0, and the other variables so that M > 0 > c > 0 and S > 0. The 
execution of the Perturbator consists of the steps below. 

Add 1 to n. 
if (n > ff) 
{ 

Set n equal to 0. 
Add 6 to 0. 

Change A or using one of the steps i. thru vii. 

if {0 > M) 

{ 
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Set 6 equal to c. 
Add 1 to M. 

} 

} 

The computer executes the steps of the Perturbator, after each iteration of the com- 
putation s i+ i = A * Si. 

G. ITERATIVE SYSTEMS WITH MATRICES OVER ANY RING 

All of the methods in the previous section, also hold for any collection of matrices 
whose entries lie in a mathematical ring. In the previous section, the entries in the 
matrix were in F 2 for clarity. A ring R is any set of elements having the binary 
operations + and * with the following properties. 

• For any elements, x, y in R, both x + y and x * y are in R. 

• For any elements, x, y in R y x + y = y + x. 

• For any elements, x,y, and z in tf, (x + y) + z = x + (y + z). 

• There is an identity element 0 with respect to +. For any x in R, 0+x = x+0 = x. 

• Every element x in R has an additive inverse -x in R so that x + -x = 0. 

• For any elements, x, y, and z in R, (x * y) * z = x * (y * z). 

• There is an identity element 1 with respect to *. For any r in ft, l*r = r*l = r. 

• * distributes over +. For any elements, x,y, and z in ft, z * (x + y) = z * x + z * y, 
and (x + y)*z = x*z-|-y*z. 

Below are some examples of rings whose elements can be in a matrix. 

i. The integers {. . . , -3, -2, -1,0,1,2,3,...} using addition and multiplication. 

ii. The rational numbers with the standard addition and multiplication operations. 

iii. The real numbers with the standard addition and multiplication operations. 

iv. The complex numbers with the standard addition and multiplication operations. 

v. The set of n by n matrices whose entries lie in a field F, including finite fields. 

vi. The set of quaternions constructed over any field, including finite fields. The set 
of quaternions are the set of all formal symbols a 0 + aii + a 2 j + a 3 k, where ao,ai,a 2j and 
a 3 all lie in the same field, F. Addition for two elements in the quaternions is 

(a 0 + ai'i + a2j 4- o 3 k) + (6 0 + &ii + b 2 j + 6 3 k) = (a 0 + b 0 ) + (oi + 6 x )i + (a 2 + 6 2 )j + (a 3 + 6 3 )k. 

Multiplication for two elements in the quaternions is 

(a 0 + ai'i + 02j + a 3 k) * (6 0 + M + &2j + b 3 k) = (co + c x i + 4- c 3 k) where 

cq = ao6o — a\b\ — a 2 6 2 — a 3 ^ 3 ; C\ = a^b x + ai6o + a 2 6 3 — a 3 6 2 ; c 2 = ao^ 2 — ai6 3 + a 2 6o + a 3 6 x ; 

and c 3 = a 0 6 3 + ai6 2 - a 2 6i + o 3 6 0 . 

vii. Any finite ring Z n . Notice that this includes the particular finite fields: F 2 , F 3 , F 5 , 
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F7i • ■ • >^31) ■ • • > Fi27> ' * ■ 

viii. The finite commutative ring with 4 elements Ri = {0, l,i,i + l}, where the ring 
operations + and * satisfy the following rules: 0 is the identity element with respect 
to +. 1 is the identity element with respect to *. i * i = 1. i + i = 0. 1 + 1 = 0. 
Note: FU is neither isomorphic to Z 4 , nor isomorphic to Z 2 x Z 2 . 

H. CHANGING A DYNAMICAL SYSTEM WITH A PERTURBATOR 
In the Perturbator discussed in section , one can substitute the step, Set M to the next 
prime number p, for the step Add 1 to M. Further, initialize M to some arbitrary prime 
number. These substitutions create a different implementation of a Perturbator. An 
important idea is that if M is changed to a value it has never been assigned, then the 
dynamical system can be perturbed in a non-periodic way. This idea enables a more 
general Perturbator that perturbs an arbitrary dynamical system in a non-periodic 
way. Below are the steps of this more general Perturbator that are executed after each 
iteration of the dynamical system. 

Add 1 to n. 
if (n > 0) 
{ 

Set n equal to 0. 
Add S to 6. 

Change elements or parameters in the other dynamical system. 

if (9 > M) 

{ 

Set 6 equal to c. 
Change M. 

} 

} 

The most general method is to use a distinct dynamical system P : Y — > Y as 
the Perturbator. As stated in the section that introduces dynamical systems, let 
f : X — ► X be any initial function that needs to be transformed into a non-autonomous 
dynamical system. Initialize D to a subset of Y. The execution steps are: 

do 
{ 

Iterate /: Si = /(s»-i). 
Iterate P: y t = P(vi-i)- 
If (yi lies in D) 



18 

{ 

Change /. 

Remove or add elements to D. 

> 

} 

while (More states Si need to be generated) 

I. NON-AUTONOMOUS SYSTEMS USING PERMUTATIONS 

The goal here is to create a sequence of states using a sequence of permutations. 
Choose an initial permutation a with length L. Initialize the state number vari- 
able i to 0. Initialize variables k and j to two natural numbers lying in the set 
{0,1,2,3,...,(L - 1)}. Steps A thru E are executed inside of a loop. The number of 
times the loop is executed determines the number of states generated in the sequence. 
The system described below generates a sequence of states, [s 0 ,si,s 2j . . .]- 

A Set k equal to (k + 1) modulo L. 

B Set j equal to (j + <x _1 (k)) modulo L. 

C Set state sj equal to a((a(k) + a(j)) modulo L). 

D Set the state number i equal to i + 1 . 

E Transpose the (j _1 (k)th entry and a _1 (j)th entry in a. 

In current technology, data written to and read from streams is often in bytes. A 
byte represents 2 8 = 256 distinct values. Thus, steps A thru E are illustrated on a 
permutation of length 256. Choose a as: 

[44, 248, 189, 104, 187, 201, 127, 226, 220, 136, 155, 237, 86, 144, 166, 27, 152, 204, 150, 
202, 114, 157, 67, 245, 172, 22, 89, 167, 214, 145, 42, 191, 57, 77, 186, 251, 31, 161, 221, 111, 
250, 51, 117, 205, 0, 48, 79, 165, 76, 209, 181, 151, 198, 78, 200, 129, 179, 49, 230, 3, 102, 
222, 146, 203, 30, 227, 70, 196, 140, 109, 177, 63, 32, 75, 228, 178, 253, 43, 10, 105, 38, 128, 
11, 174, 23, 215, 25, 223, 110, 182, 137, 216, 176, 229, 141, 163, 212, 94, 143, 193, 219, 88, 
133, 218, 197, 180, 90, 171, 255, 84, 95, 81, 124, 185, 108, 121, 247, 194, 87, 40, 9, 41, 238, 
92, 131, 168, 184, 115, 2, 14, 54, 103, 17, 122, 26, 192, 246, 4, 208, 225, 71, 119, 126, 118, 33, 
130, 183, 46, 101, 159, 224, 1, 125, 142, 107, 217, 37, 234, 242, 15, 35, 239, 211, 236, 65, 154, 
16, 5, 34, 98, 61, 156, 53, 6, 59, 100, 162, 116, 206, 68, 169, 85, 58, 113, 45, 62, 148, 106, 243, 
249, 7, 55, 147, 66, 91 , 233, 39, 36, 47, 190, 252, 29, 235, 82, 96, 60, 188, 97, 18, 213, 24, 153, 
240, 158, 195, 139, 232, 72, 120, 93, 135, 210, 199, 164, 149, 99, 160, 134, 13, 19, 83, 52, 132, 
175, 231, 123, 241, 28, 207, 73, 112, 64, 50, 12, 80, 74, 20, 56, 8, 173, 254, 138, 244, 170, 69, 
21]. 
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Executing steps A thru E in a loop ten times, the first ten states are: 
[5 0 , Si, 5 2 , 5 3 , s 4 , s 5 , 5 6 , 5 7 , 5 8 , s 9 ] = [224, 104, 158, 8, 149, 5, 133, 0, 21, 198]. 

Steps A thru E are described in more detail to show how the states are generated. 
Initialize j = 143 and k = 255. 

At step A, k is set equal to 0 because 255 + 1 modulo 256 equals 0. 

At step £, j is set equal to (143 + a -1 (0)) modulo 256. Since a(44) = 0, a _1 (0) = 44. 
Thus, after step B, j = 187. 

At Step C, <j( (a(0) + a(187)) modulo 256) = <r((44 + 106) modulo 256) = *(150) = 224 SO 
State s 0 = 224. 

At step £>, add 1 to i, so i = 1. 

At step £, the simplest way to understand this step is to recognize that for any 
number m the o-^mjth entry in a is m. With this in mind, since k = 0 and j = 187, 
swap 0 and 187. The two entries swapped are shown in bold. After this transposition, 
the new value of a is: 

[44, 248, 189, 104, 0, 201, 127, 226, 220, 136, 155, 237, 86, 144, 166, 27, 152, 204, 150, 
202, 114, 157, 67, 245, 172, 22, 89, 167, 214, 145, 42, 191, 57, 77, 186, 251, 31, 161, 221, 111, 
250, 51, 117, 205, 187, 48, 79, 165, 76, 209, 181, 151, 198, 78, 200, 129, 179, 49, 230, 3, 102, 
222, 146, 203, 30, 227, 70, 196, 140, 109, 177, 63, 32, 75, 228, 178, 253, 43, 10, 105, 38, 128, 
11, 174, 23, 215, 25, 223, 110, 182, 137, 216, 176, 229, 141, 163, 212, 94, 143, 193, 219, 88, 
133, 218, 197, 180, 90, 171, 255, 84, 95, 81, 124, 185, 108, 121, 247, 194, 87, 40, 9, 41, 238, 
92, 131, 168, 184, 115, 2, 14, 54, 103, 17, 122, 26, 192, 246, 4, 208, 225, 71, 119, 126, 118, 33, 
130, 183, 46, 101, 159, 224, 1, 125, 142, 107, 217, 37, 234, 242, 15, 35, 239, 211, 236, 65, 154, 
16, 5, 34, 98, 61, 156, 53, 6, 59, 100, 162, 116, 206, 68, 169, 85, 58, 113, 45, 62, 148, 106, 243, 
249, 7, 55, 147, 66, 91, 233, 39, 36, 47, 190, 252, 29, 235, 82, 96, 60, 188, 97, 18, 213, 24, 153, 
240, 158, 195, 139, 232, 72, 120, 93, 135, 210, 199, 164, 149, 99, 160, 134, 13, 19, 83, 52, 132, 
175, 231, 123, 241, 28, 207, 73, 112, 64, 50, 12, 80, 74, 20, 56, 8, 173, 254, 138, 244, 170, 69, 
21]. 

These steps A thru E can be executed as many times as needed to create a sequence 
of states. Further, the order in which steps A thru E are executed can also be changed. 

If smaller keys are the primary goal in the encryption system, use the same steps A 
thru E on a permutation with a smaller length. For example if a has length 64, then 
each state Si generated in step C is a number ranging from 0 to 63. This state 5» can 
be used to encrypt 6 bits of a message because 64 = 2 6 . 

This paragraph presents the concept of eventual periodicity. A sequence of states 
[so, 5i, 5 2 , . . . ] is eventually periodic if there are two positive integers k and n such that for 
each integer j between 0 and n-1 inclusive s k + 5 = 5 fc + J+T7m for every integer m > 0. This 
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sequence eventually has a period of n and that k is the threshold for this eventual peri- 
odicity. As an example, the sequence [2, 7, 4, 3, 5, 1, 3, 5, 1, 3, 5, 1, ... ] is eventually periodic 
because it eventually starts to repeat 3, 5, l, 3, 5, l, 3, 5, 1, ... . It has a threshold k = 3 and 
period n = 3. As another example, the sequence [1,0,4,3,5,7,8,2,1,7,8,2,1,7,8,2,1,...] is 
eventually periodic with k = 5 and period n = 4. 

It can be mathematically shown that a broad class of current encryption algo- 
rithms generate a sequence of states that is eventually periodic. Some members of 
the cryptographic community believe that the encrypted message is not vulnerable 
if the threshold A; or the period n are sufficiently large. However, there are methods 
in the field of dynamical systems to develop predictive models of this type of behav- 
ior. In the future, it is possible that someone could propose a method of using this 
eventual periodicity to decode an encrypted message even for extremely large periods. 

There is a simple computationally efficient way to break up eventual periodicity. 
Use a Perturbator to change a in a non-periodic way. As stated before, in the Pertur- 
bator section, initialize the integer variables: n,0,<5,M and c. We prefer to initialize 
n — 0, and initialize the other variables so that M > 6 > c > 0 and 6 > 0. Our software 
implementation of a Perturbator consists of the following steps. 

Add l to n. 
if (n > 6) 
{ 

Set n equal to 0. 
Add 5 to 0. 

Change a. 

if (0 > M) 
{ 

Set 6 equal to c. 
Add 1 to M. 

} 

} 

In the step, Change a, there are two preferred ways to do this. The first way is to 
transpose two elements of a when execution speed is more important. A second way 
is to rotate a. The file NADO.jar changes a using a rotation. 

Below is a summary of the preferred method to generate a sequence of states, 
[80,81,82,...], using a non-autonomous system built from permutations. 

do 
{ 

A Set k equal to (k + 1) modulo L. 
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B Set j equal to (j + ^(k)) modulo L. 

C Set state s { equal to a((<j(k) + a(j)) modulo L). 

I> Set the state number i equal to i + 1 . 

E Transpose the a-^kjth entry and a-^jjth entry in a. 

F Execute a Perturbator to change a in a non-periodic way. 

} 

while (More states sj need to be generated) 

Any reordering of the steps A thru F inside the do-while loop will work as well to 
generate a sequence of states. Further, step E can be removed, if the Perturbator 
in step F uses transpositions to change a, o changes frequently, and the Perturbator 
changes a in a non-periodic way. 

An alternative is to use more than one permutation to generate an unpredictable 
sequence of states. As an example, initialize two distinct permutations o u o 2 of length 
L. Initialize non-negative integers j u j 2 , and k. Set i equal to 0. 

do 
{ 

A Set k equal to (k + 1) modulo L. 

B Set ji equal to (ji 4- a^ 1 (k)) modulo L. 

C Set state Si equal to oi((ai(ji) + <x 2 (k)) modulo L). 

D Set state s i+ i equal to +°2 l {h)) modulo L). 

E Set j 2 equal to (j 2 + x (k)) modulo L. 

F Set state s i+2 equal to 1 ((af x (k) + a 2 ~ 1 (j 2 )) modulo L). 

G Set state s i+3 equal to o 2 ((o 1 {j 2 ) +^2(ji)) modulo L). 

H Transpose the erf x (k)th entry and a 2 (j 2 )th entry in <ji. 

/ Transpose the a^^kjth entry and ai(j x )th entry in a 2 . 

J Execute a Perturbator to change ai in a non-periodic way. 

K Execute a Perturbator to change a 2 in a non-periodic way. 

L Set the state number i equal to i + 4 . 

} 

while (More states s x need to be generated) 

The previous method with two permutations, approximately doubles the memory 
use and approximately doubles the speed. The spirit of this method can be extended 
to 3 or more permutations, when speed is a higher priority than memory usage. 
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J. BUILDING NADO WITH A KEY 

A NADO key is a collection of integers, or a sequence of bits interpreted as a 
collection of integers. NADO uses one integer for the initial orbit point. NADO uses 
3 positive integers and 1 non-negative integer for the initialization of 0,£,M and c in 
the Perturbator, described in subsections VI.F and VI. H. 

To generate a permutation a, first initialize a to the identity permutation, where n 
is the size of a. A part of the NADO key can be a sequence of non-negative integers, 
denoted as & 0 , k lt . . . , k m . In the case when the following three conditions hold: 

• m + 1 equals n. 

• The numbers fc 0 , fci, . . - , k m satisfy 1 < ki < n. 

• fc 0 , &i, • . . , fc m are chosen with an excellent random number generator. 

then initialize a equal to [k 0 , k u k 2l . . . fc m ]. 

If the above three conditions do not hold, then execute the following steps to ini- 
tialize a. Initialize r and q to 1. 

while (r < n) 

{ 

Set v equal to r modulo (m + 1). 

Set q equal to (k v + q — <J _1 (r)) modulo n. 

Transpose the rth and o-~ 1 (q + l)th entries in a. 
Increment r by 1. 

} 

An n by n matrix over F 2 is initialized by the key as follows. First, a permutation- 
based non-autonomous dynamical system is initialized as described above. Then this 
system is iterated to build the matrix. This system's state after each iteration is 1 
byte, which represents a sequence of 8 ones and zeros. This sequence of ones and 
zeros is stored in the n by n matrix over F 2 . 

The part of the key that is used to build the matrix is contained in the array 
of integers, int[] values. The two dimensional array matrixfijfk] represents the n by n 
matrix over F 2 . The method call PermutationOrbitor.create(256, values) creates a non- 
autonomous dynamical system, using a sequence of permutations of size 256. The 
method call po.statef) returns the system's state. The section of JAVA code below 
illustrates this in more detail: 

int[] bytes = { 0, 0, 0, 0 }; 
int[] shiftbits = {Q, 8, 16, 24 }; 

PermutationOrbitor po = PermutationOrbitor. create (256, values); 

forfint i = 0; i < numrows; 

for(int k = 0; k < numcolumns; k++) 
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{ 

forftnt q = 0; q < 4; q++) 
{ 

po. iterate (); 

bytesfqj = (po.stateQ « shiftbitsfaj); 

> 

matrix[i][kj = (bytesfO] A bytes[l] A bytes[2j A bytesfi]); 

} 

This method of initializing an n by n matrix is highly effective at generating an 
unpredictable sequence of ones and zeros even with an extremely small, poor key. As 
an example, using only 4 small integers, valuesfO] = 1, valuesfl] = 2, values[2] = l, and 
values[3] = i, the code in NADO.jar generates the 32 by 32 matrix: 
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00101010100011010110111110110111 
11110101001011010101111001001100 
10001100101101001011110110000110 
10010101011100001101011000011001 
10011101010100110101100011100000 
11001010110000010110011110101000 

In NADO.jar, the non-autonomous system used in the encryption and decryption 
process depends on the key. In particular, from the key the parities of integers are 
determined. If the sum of the parities modulo 2 is l, then the non-autonomous system 
is generated by a 32 by 32 matrix with entries in F 2 . If the sum modulo 2 is 0, then it 
is generated by a non-autonomous system of permutations of size 256, as described in 
subsection VI. I. 

Keep in mind that in the general NADO cryptographic process, there is the choice 
of implementing one or more non- autonomous dynamical systems. If the choice is to 
implement only one, then, for example, an implementation might only use a 64 by 64 
matrix with entries in F 2 to generate the non- autonomous system. In this case, even 
if the key changes, this implementation would still use a 64 by 64 matrix with entries 
in F 2 . As a different example, an implementation might only use a non- autonomous 
system of permutations. In this case, even if the key changes, this implementation 
would still use a non- autonomous system of permutations. 

K. KEY DISTRIBUTION 

NADO uses a symmetric private key. There are different ways to distribute the 
key. 

i. The sender uses an excellent random number generator to build the private 
key for NADO. At the beginning of the conversation or data exchange, the sending 
agent sends the NADO private key to the receiving agent using a public-private key 
system. After the private key has been sent, the public-private key system is no longer 
needed. [SCHNEIER] describes a number of protocols that describe how to exchange 
keys using public-private key methods. Some of these protocols for key exchange 
using a public-private key method are: Interlock, Dass, Denning-Sacco, Woo-Lam. 

This technique greatly enhances the speed at which two parties can communicate 
in a secure way, as NADO encrypts and decrypts at a much faster rate then public- 
private key cryptographic methods. (See subsection N.) 

ii. In applications where the number of potential recipients of an encrypted trans- 
mission is small and the recipients are known beforehand, the sending and receiving 
agents can agree to have the private key transmitted in a secure way. A courier 
may hand-carry the key. There are also a number of automated ways described in 
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[SCHNEIER]: Wide-Mouth Frog, Yahalom, Needhan-Schroeder, Otway-Rees, Kerberos, Neuman- 
Stubblebine. 

Method i. is superior when the number of potential recipients of an encrypted 
transmission is large and potential recipients are unknown. These applications in- 
clude: 

• Secure wireless applications such as cell phone conversations, wireless e-mail 
transmissions, wireless transactions, wireless e-commerce, and satellite transmissions. 

• Secure software applications such as e-mail applications, enterprise computing, 
online e-commerce, online messaging, enterprise portal software, and other internet 
applications. 

Method ii. is preferred for military applications and specialized banking applica- 
tions, when there are a small number of people communicating, and there is a high 
degree of confidence that the private key will not be intercepted and stolen. 

L. INSTRUCTIONS ON THE USE OF N ADO. JAR 

On the CD-ROM, the file NADO.jar contains JAVA byte code that executes on a 
JAVA virtual machine. A JAVA virtual machine should be installed, and the system 
variable CLASSPATH should contain the directory path that NADO.jar is in. The 
main class in NADO.jar is N ADO. class. NADO. class enables four different commands by 
calling four static methods: buildKey, encrypt, decrypt, and main. 

Using arrays of integers as input, the first static method allows the user to create 
an object NADOKey which stores the NADO private key. 

public static NADOKey buildKey(int[] aiO, int[f ail, int[] ai2, intf] aiS) 

The four arguments aiO, ail, ai2, and ai3 store arrays of integers used to initialize the 
perturbator, the sequence of permutations, the orbit point, and the non-autonomous 
dynamical system. NADO. class assumes that these arrays of integers have already been 
generated elsewhere by a random generator, and distributed securely. The object 
NADOKey returned by method buildKey can be used as an argument by the next two 
methods encrypt and decrypt. 

The second static method enables a user to read a message coming from Input- 
Stream plain, encrypt this message using the argument ky, and write the ciphertext to 
OutputStream cipher. 

public static void encrypt (InputStream plain, OutputStream cipher, NADOKey ky) 

The third static method enables a user to read ciphertext coming from InputStream 
cipher, decrypt the ciphertext using the argument ky, and write the message to Output- 
Stream decipher. 

public static void decrypt (InputStream cipher, OutputStream decipher, NADOKey ky) 
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Because of the generality of the JAVA classes InputStream and OutputStream, the methods 
buildKey, encrypt and decrypt in NADO.jar enable a wide variety of encryption/decryption 
applications. 

The fourth static method main enables the user to encrypt and decrypt files from 
the command line, main expects the files 032.txt, M32.txt, P.txt, and Ntxt to be in the 
same directory as NADO.jar. 032.txt stores a single integer, and M32.txt, P.txt, and Ntxt 
store integers that make up the NADO key. The encrypted and decrypted files should 
He in the subdirectory /text. As an example, the command java NADO E plainl.txt reads 
the message in the file plainl.txt and writes the ciphertext to the file cipher32.plainl.txt. 
The command java NADO D cipher32.plainl.txt reads the encrypted file cipher32jplainl.txt, 
decrypts it, and writes the resulting message to plainl.txt. These commands must be 
typed in from the same directory as NADO.jar. 

On the CD-ROM, there are two files cipher32.plainl.txt and cipher32.plain2.txt in the 
subdirectory /text. These two files were encrypted by NADO.jar. 

M. PERFORMANCE OF NADO.jar 

NADO.jar is fast enough to execute real-time encryption and decryption on wire- 
less devices such as cell phones and other consumer products; to execute real-time 
encryption/ decryption of data in military applications such as theatre missile defense; 
and to perform real-time encryption for high speed networking applications. 

NADO.jar encrypts and decrypts uncompressed information at a speed ranging 
from 180, 000 to 210, 000 bytes per second, on a laptop computer running an Intel 150 Mhz 
Pentium x86 Family5 Model4 microprocessor. On a laptop computer running an Intel 
996 Mhz Pentium III microprocessor, NADO.jar encrypts and decrypts uncompressed 
information at a speeding ranging from 2, 200, 000 to 2, 400, 000 bytes per second. 

These speeds do not measure the amount of time to read from the input file and 
write to the output file because hard drive speeds vary considerably. Furthermore, in 
some cryptography applications, reading and writing to a file does not occur. Cur- 
rently, cell phones and some handheld computers do not have a hard drive. Current 
cell phone technology requires a speed of 20, 000 bits per second to perform real-time 
encryption, which is equivalent to 2,500 bytes per second (l byte = 8 bits). At these 
speeds, NADO easily enables real-time encryption and decryption on cell phones and 
wireless PDAs. NADO.jar uses 10, 241 bytes of memory, so it can run on devices such 
as PDAs, cell phones, and small embedded military applications. Since NADO im- 
plementations in C or assembly code will be far more efficient, a C or assembly code 
implementation of NADO should take up less than 5,000 bytes of memory, and execute 
10 to 100 times faster than the speeds stated here. 
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VII. DESCRIPTION OF ALTERNATIVE EMBODIMENTS 

This section describes alternative embodiments of NADO. 

Alternative 1. In cases where speed and a smaller key size is important, this alter- 
native uses only a sequence of permutations to change the order of the message. This 
process is outlined in subsection VIA, step ii of method A and step iii of method B. 
This process is described in detail in subsection VI.C. As shown in subsection VLC, 
each permutation in the sequence may have a different length. 

Alternative 2. This alternative is an extension of alternative 1. In addition to a 
sequence of permutations to reorder the message, it also uses a Perturbator to change 
the sequence of permutations in a non-periodic way. 

Alternative 3. This alternative uses only a non-autonomous dynamical system to 
create a sequence of unpredictable states. This process is introduced in subsection 
VI.D. This process is covered in detail in subsections VI.E, VI.G, and VI.I. 

Alternative 4. This alternative is an extension of alternative 3. In addition to a 
non-autonomous dynamical system to create a sequence of unpredictable states, it 
uses a Perturbator to change the non-autonomous system in a non-periodic way. 

Alternative 5. This alternative is an extension of alternatives 1 and 3. It uses a 
sequence of permutations to reorder the message or states, and a non-autonomous 
dynamical system to create a sequence of unpredictable states, but does not use 
Perturbators. 

Alternative 6. This alternative uses part of the cryptographic process to generate 
pseudo-random numbers. As introduced in section VI.D and discussed in detail in 
sections VI.E, VI.G, and VI.I, NADO generates a sequence of unpredictable states: 
[si 0 ySi l} Si 21 s i31 ,..] t In the case when these states come from a matrix over F 2 , then 
the states are sequences of 1's and O's. This sequence of ones and zeroes can be 
converted to pseudo-random integers or pseudo-random rational numbers by sampling 
enough ones and zeroes and then using linear interpolation between the smallest and 
largest numbers allowed. If a sequence of permutations generates the states, then 
just convert each state to a sequence of ones and zeroes, and repeat the steps just 
described. Converting the states to ones and zeroes is straightforward. First, make 
sure that the size of the permutations is a power of 2. As an example, if the size 
of the permutations is 256, then each state is a number between 0 and 255, inclusive. 
Each state can be easily converted to its 8 bit binary representation. Some of these 
conversions are listed: 0 [00000000], 1 -> [00000001], 2 [00000010], 3 -> [00000011], 4 -> 
[00000100], 5 - [00000101], 6 [00000110], 7 - [00000111], 8 - [00001000], . . . , 15 -> [00001111], 
16 - [00010000], 17 -> [00010001], . . . , 31 - [00011111], 32 - [00100000], 33 - [00100001], 
63 - [00111111], 64 - [01000000], 65 - [01000001], 127 - [01111111], 128 - [10000000], 
129 - [10000001], . . . , 255 - [11111111]. 

Alternative 7. As explained in alternative 6, pseudo-random numbers can be gen- 
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erated. These pseudo-random numbers can be used to build keys in a distinct en- 
cryption/decryption system. This distinct encryption/decryption device could be 
implemented with the DES algorithm, or some other well-known encryption algo- 
rithm, or even the NADO encryption/decryption process. Thus, NADO can be used 
to generate keys. 

VIII. CONCLUSIONS, RAMIFICATIONS, AND SCOPE OF INVENTION 

The process for encrypting and decrypting information makes use of three novel pro- 
cesses in cryptography: (1) A sequence of permutations which scrambles and spreads 
out the encrypted message; (2) A non-autonomous dynamical system to generate an 
unpredictable sequence of states; (3) One or more perturbators which perturb both 
the non-autonomous dynamical system and the sequence of permutations in a non- 
periodic way. As discussed in section VII, there are alternative embodiments that use 
particular combinations of (1), (2), and (3). 

While NADO has been described in complete detail, and two implementations are 
demonstrated in JAVA byte code, NADO is not to be limited to such details, since 
many changes and modifications may be made to NADO without departing, from 
the spirit and scope thereof. Persons of ordinary skill in the art may implement 
the invention in various ways and configurations that embody the subject matter 
encompassed literally and by equivalents in the following claims. Hence, NADO is 
described to cover any and all modifications and forms which may come within the 
language and scope of the claims. 



